__GetExceptDLLinfo
___CPPdebugHook
Behavioral task
behavioral1
Sample
907fc8e74d6b2b1f87532e45c67be32a_JaffaCakes118.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
907fc8e74d6b2b1f87532e45c67be32a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
Target
907fc8e74d6b2b1f87532e45c67be32a_JaffaCakes118
Size
1.1MB
MD5
907fc8e74d6b2b1f87532e45c67be32a
SHA1
b4814d3f31bd75ee222288185cc6a68020fa9732
SHA256
156d5ea43074da4fca77aaf6086b46d2310d6ce808ade5b21d4e44f4db51cdc7
SHA512
711324addcc7a9ae9d66cdc86770c550493f8d05b5d48070d4b02a73b4b7cd3db146766bcd774ac5d5622c366c2383ea332de7ef447751b8751f6faa796abaeb
SSDEEP
12288:iKaogxdKeyCGWFf6jG8NFC1pG12HEw91k1ERINWllyVkQwKncn:iKaogx7Fh8NFC1pGsHN91hllIk4ncn
Processes:
resource | yara_rule |
---|---|
sample | themida |
Checks for missing Authenticode signature.
Processes:
resource |
---|
907fc8e74d6b2b1f87532e45c67be32a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
__GetExceptDLLinfo
___CPPdebugHook
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE